CVE-2025-27257 in N60 Multilin
Riassunto
di MITRE • 10/03/2025
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.